Digital Personal Data Protection (DPDP) Act, 2023

Blood groups and donor contact details constitute Sensitive Personal Data or Information (SPDI). We implement unambiguous consent forms, allow users to delete their profiles, and store data securely in strict compliance with the DPDP Act.

Explicit Consent for Sensitive Data

Users (both donors and those requesting blood) must formally opt-in and provide explicit consent to having their names, blood types, and contact details shared. Your personal data is treated with the utmost confidentiality and only processed for the purpose of facilitating blood donations.

Data Handling & Deletion

• Donors: Your profile data (name, blood group, contact details, location) is securely stored to connect you with critical requests. You have complete control over your profile and can request full account deletion at any time. Upon deletion, all your personal identifying information is permanently removed from our active databases.
• Requesters: The information provided during a blood request (patient details, hospital location, contact info) is used strictly to fulfill the medical emergency. Any sensitive medical proof images uploaded during the request process are automatically deleted from our servers as soon as they are verified by an administrator. While you can close or delete your request once fulfilled, basic non-identifying transaction logs may be securely retained for legal compliance and auditing purposes.

Data Breach Notification & Compliance (Sections 8(6) & 33)

In accordance with Section 8(6) of the DPDP Act 2023, in the unlikely event of a security lapse or personal data breach, we are legally committed to immediately notifying the Data Protection Board of India and all affected users. We acknowledge and fully comply with the regulatory frameworks and potential penalties outlined under Section 33 to ensure maximum accountability for your data.

Data Protection Officer (DPO) & Grievances

To ensure transparency and address any concerns regarding your data privacy, we have appointed a Data Protection Officer. If you have any complaints, data grievances, or require profile deletion assistance, you can reach our DPO directly at moulislifecare@gmail.com or contact our official support number.

Information Technology (IT) Act, 2000

Under Section 43A and Section 79, our website is legally classified as an "intermediary." We maintain secure servers and obtain verifiable user consent. We also publish clear Privacy Policies and Terms of Service to protect our platform and users from liability regarding user-generated content.

Data Masking & Geolocation

To protect users from spam or fraudulent calls, we mask contact numbers or utilize in-app/platform messaging over direct disclosure of personal phone numbers where possible. We also include features that map requests to verified, licensed local blood banks, reducing physical transport time while ensuring privacy.